$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba9d28d8-9cc3-3a34-8f76-a1ea854bd1d4.roa File: ba9d28d8-9cc3-3a34-8f76-a1ea854bd1d4.roa (raw, json) Hash identifier: Dd8ISFT/i4N/3aDG2ncExHKehtvRl/gboBVBCDHGUhs= Subject key identifier: F0:DC:21:BD:D7:36:BB:BE:8F:73:22:84:36:6A:EF:85:90:D0:79:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84113FE96388644B51793D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba9d28d8-9cc3-3a34-8f76-a1ea854bd1d4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 162.72.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:3f:e9:63:88:64:4b:51:79:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4d28024a-bd75-4d17-980d-ca3ef7925fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:96:da:f1:07:cc:3d:af:51:45:ff:51:13:59: ba:c8:36:89:bc:31:0a:5b:27:69:ca:7b:e4:f1:1a: 35:f5:8a:16:95:53:fa:94:dd:1f:ee:91:1f:96:8b: 55:24:d9:bc:51:ec:9c:8f:4d:14:6c:cc:36:30:9b: 4b:97:25:f9:4e:40:24:95:fe:90:95:d5:d5:15:10: 54:7e:cb:56:86:03:7c:1e:79:aa:cc:3d:32:84:5f: d7:93:5c:4b:4a:10:93:35:66:71:6b:61:61:1f:85: 3c:ab:24:e2:af:98:6f:4a:84:1a:29:d2:9f:40:9b: 28:07:bc:ba:89:d4:bf:b3:9d:ec:fb:36:52:08:6f: 82:c3:ab:87:cf:23:46:cf:e3:e7:21:23:65:40:eb: 99:7b:45:dd:e2:20:de:ba:88:97:b8:7d:a9:80:62: cb:de:9d:18:fd:fe:7d:14:a5:58:67:4d:7e:ba:15: 3c:cb:4a:f1:1e:d9:3a:f6:5b:78:c8:67:3a:50:8c: 2b:32:62:cb:81:38:98:37:c5:17:cf:70:0a:00:e6: 7c:27:a8:9f:df:e3:4b:51:aa:71:f9:9c:2c:0c:6b: 98:38:ab:69:2a:02:82:1c:a0:04:a6:8c:fa:51:1d: a2:ca:41:b1:cd:fd:c3:4a:19:83:30:ea:09:6b:af: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:21:BD:D7:36:BB:BE:8F:73:22:84:36:6A:EF:85:90:D0:79:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba9d28d8-9cc3-3a34-8f76-a1ea854bd1d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:fd:64:65:e0:23:48:fa:46:91:7b:9c:cf:5f:eb:d7:61:9b: 91:bc:0a:3c:bb:29:61:90:5e:b8:9c:87:3d:ea:e8:07:fc:96: 4d:e6:26:2f:39:f2:3d:46:13:00:b2:d3:e5:79:f6:b5:67:51: c9:77:88:d6:4a:46:4e:ec:9b:5c:60:e7:2b:ad:f3:f5:64:65: 62:b4:d0:9e:c6:23:ff:61:bc:27:e2:92:af:46:9b:ab:84:bf: ec:89:0d:cd:be:93:95:bd:1f:5e:c6:05:c4:2e:18:1c:50:53: 59:65:82:6e:14:20:12:49:2f:cb:57:d3:10:65:95:a4:1f:98: 7b:63:72:d0:d0:bf:11:d8:ec:8f:8f:fa:c2:39:7e:bc:99:e3: 03:5d:62:7b:6a:01:00:8c:81:64:05:79:6e:f1:15:e4:ee:c6: eb:f4:63:ea:9a:0d:bb:0e:e3:95:c6:48:47:06:ae:04:0c:0a: 92:80:19:60:21:41:99:dd:71:2a:8e:38:84:5c:35:ac:58:7d: d5:57:5e:2e:6a:f7:76:0e:9a:20:39:c4:66:a0:22:b5:58:6c: dc:c7:b3:8d:ef:c0:a1:53:7f:d7:da:d5:07:d6:76:2c:58:a0: 7d:5f:8b:f6:69:9c:36:6f:70:1b:52:a6:24:cc:8e:d6:80:9a: 9d:cb:cc:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEET/pY4hkS1F5PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGQyODAyNGEtYmQ3NS00ZDE3LTk4MGQtY2EzZWY3OTI1ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pba8QfMPa9RRf9RE1m6yDaJvDEKWydpynvk 8Ro19YoWlVP6lN0f7pEflotVJNm8Ueycj00UbMw2MJtLlyX5TkAklf6QldXVFRBU fstWhgN8HnmqzD0yhF/Xk1xLShCTNWZxa2FhH4U8qyTir5hvSoQaKdKfQJsoB7y6 idS/s53s+zZSCG+Cw6uHzyNGz+PnISNlQOuZe0Xd4iDeuoiXuH2pgGLL3p0Y/f59 FKVYZ01+uhU8y0rxHtk69lt4yGc6UIwrMmLLgTiYN8UXz3AKAOZ8J6if3+NLUapx +ZwsDGuYOKtpKgKCHKAEpoz6UR2iykGxzf3DShmDMOoJa692NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDcIb3XNru+j3MihDZq74WQ0HluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmE5ZDI4ZDgtOWNjMy0z YTM0LThmNzYtYTFlYTg1NGJkMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKz9ZGXgI0j6RpF7nM9f69dhm5G8Cjy7KWGQXrichz3q6Af8lk3mJi85 8j1GEwCy0+V59rVnUcl3iNZKRk7sm1xg5yut8/VkZWK00J7GI/9hvCfikq9Gm6uE v+yJDc2+k5W9H17GBcQuGBxQU1llgm4UIBJJL8tX0xBllaQfmHtjctDQvxHY7I+P +sI5fryZ4wNdYntqAQCMgWQFeW7xFeTuxuv0Y+qaDbsO45XGSEcGrgQMCpKAGWAh QZndcSqOOIRcNaxYfdVXXi5q93YOmiA5xGagIrVYbNzHs43vwKFTf9fa1QfWdixY oH1fi/ZpnDZvcBtSpiTMjtaAmp3LzDU= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:30 2025 by rpki-client